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(57) Abstract: A method of authorising a user in com- 
munication with a workstation is disclosed. Accord- 
ing to the method, a system automatically determines a 
plurality of available user information entry devices in 
communication with the workstation. The system then 
determines predetermined user authorisation methods 
each requiring data only from available user informa- 
tion entry devices. The user then selects one of the de- 
termined authorisation methods for use in user autho- 
risation. Optionally, each authorisation method is as- 
sociated with a security level relating to user access to 
resources. Once the authorisation method is selected, 
the user provides user authorisation information in ac- 
cordance with a determined user authorisation method 
and registration proceeds. 
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Claims 



What is claimed is: 



1. 



A method of authorising a user in communication with a workstation 



5 comprising die steps of: 

automatically detennining a plurality of available user information entry 
devices in communication with the workstation; 

determining user authorisation methods each requiring data only from 
available user information entry devices from a plurality of user authorisation 
10 methods, each user authorisation method associated with a security level, some user 
authorisation methods associated with different security levels for a same user; 

providing user authorisation information in accordance with one of the 
determined user authorisation methods; 



15 the provided user authorisation information is provided in accordance with the 
selected method; and, 

registering the user authorisation information provided against stored data to 
perform at least one of identifying and authorising the user within the associated 
level of security. 



2. A method of authorising a user in communication with a workstation 
as defined in claim 1, comprising the step of: 

determining security information associated with the user and with the 
selected user authorisation method, the security information different for different 
25 user authorisation methods. 

3. A method of authorising a user in communication with a workstation 
comprising the steps of: 

providing a plurality of supported user authorisation methods and associated 
30 security levels for each user authorisation method; 



selecting from the determined user authorisation methods a method wherein 



20 



providing user authorisation information to the workstation; 
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determining from the plurality of supported user authorisation methods an 
authorisation method requiring data only from the provided user authorisation 
information; and, 

registering the user authorisation information provided against stored data to 
5 perform at least one of identifying and authorising the user with the associated level 
of security. 

4. A method of authorising a user in communication with a workstation 
as defined in claim 3 comprising the step of: 

10 selecting from the provided user authorisation methods a method wherein the 

provided user authorisation information is provided in accordance with the selected 
method, 

5. A method , of authorising a user in communication with a workstation 
as defined in claim 4 comprising the steps of: 

at intervals prompting an individual using the workstation to provide user 
authorisation information according to the selected method; and, 

registering the user authorisation information provided against stored data to 
perform one of providing access to the secured data and denying access to the 
secured data in dependence upon the registration results. 

6. A method of authorising a user in communication with a workstation 
as defined in claim 3 comprising the step of: 

detemuning security information associated with the user and the security 
25 level, the security information different for different user authorisation methods. 

7. A method of authorising a user in communication with a workstation 
as defined in claim 6 wherein the step of determining security information comprises 
the step of retrieving a security key from a key storage location in dependence upon 

30 the registration. 

8. A method of authorising a user in communication with a workstation 
as defined in claim 7 wherein the security key is an encryption key. 
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9. A method of authorising a user in communication with a workstation 
as defined in claim 7 wherein the security key is a password. 

5 10. A method of authorising a user in communication with a workstation 

as defined in claim 3 comprising the steps of: 

upon initiating access to secured data prompting an individual using the 
workstation to provide user authorisation information; and, 

registering the user authorisation information provided against stored data in 
10 accordance with a user authorisation method to perform one of providing access to 
the secured data and denying access to the secured data in dependence upon the 
registration results. 

11. A method of authorising a user in communication with a workstation 
15 comprising the steps of: 

providing a plurality of user authorisation methods, some user authorisation 
methods requiring user authorisation information from more than one data input 
device; 

providing user authorisation information; 
20 registering the provided user authorisation information against data stored in 

a database of user authorisation data; 

when the data matches the stored data within predetermined limits, 
deterrnining a security level for the individual in dependence upon the provided user 
authorisation information and the plurality of user authorisation methods; and, 
25 authorising user access within limits based upon determined security level. 

12. A method of authorising a user in communication with a workstation 
as defined in claim 1 1 wherein user access is limited by limiting access to security 
keys based on the determined security level. 

30 

13. A method of authorising a user in communication with a workstation 
as defined in claim 12 wherein the security keys include encryption keys. 
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14. A method of authorising a user in communication with a workstation 
as defined in claim 13 wherein the security keys are stored within a portable storage 
medium. 

5 15. A method of authorising a user in communication with a workstation 

as defined in claim 14 wherein access to some security keys is provided when a user 
is authorised according to a method of user authorisation but is denied when a user is 
authorised according to another method of user authorisation. 

10 16. A method of authorising a user in communication with a workstation 

as defined in claim 12 wherein the security keys include passwords. 

17. A method of authorising a user in communication with a workstation 
as defined in claim 1 1 comprising the steps of: 
15 selecting a user authorisation method from the plurality of user authorisation 

methods during execution; and, 

providing user authorisation information in accordance with the selected user 
authorisation method. 

20 18. A method of authorising a user in communication with a workstation 

as defined in claim 1 1 comprising the steps of: 

automatically determining a presence or absence of user information entry 
devices in communication with the workstation, the user information entry devices 
including a keyboard, a card reader, and a biometric input device; and, 

determining user authorisation methods from the plurality of user 
authorisation methods that require data only from user information entry devices 
which are present. 

19. A method of authorising a user in communication with a workstation 
as defined hi claim 1 8 comprising the steps of: 

selecting a user authorisation method from the plurality of determined user 
authorisation methods; and, 
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providing user authorisation information in accordance with the selected user 
authorisation method. 
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